Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File:                     h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier:          1byWZLyrLlQkm/SyIELPmoKml1qBsQiBQAjR47jG3Lg=
Subject key identifier:   DE:9E:04:DA:28:BC:9F:EB:33:CB:35:52:69:B4:9D:78:13:9B:CE:51
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number:          01B0
Signing time:             Mon 27 Oct 2025 05:16:44 +0000
Manifest this update:     Mon 27 Oct 2025 05:16:43 +0000
Manifest next update:     Mon 03 Nov 2025 05:16:43 +0000
Files and hashes:         1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: aXPyDrdGwdcYFXuMio7/2PeTWp3rhf4i86cxdASC0ZQ=)
                          2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=)
                          3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=)
                          4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 05:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Oct 27 05:16:43 2025 GMT
            Not After : Nov  3 05:16:43 2025 GMT
        Subject: CN=68ff003c-7ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:c5:40:01:3c:44:02:5e:c3:cb:96:ef:14:
                    5a:eb:16:ee:2c:8b:4c:b4:f2:7d:83:5f:cf:32:c2:
                    28:db:b1:d2:ae:19:eb:b2:5b:60:c3:9a:43:70:56:
                    3a:26:77:31:8b:98:4b:03:eb:c2:0d:a9:1d:74:29:
                    ec:07:08:5e:a8:93:72:bc:22:65:e2:47:a7:f8:81:
                    68:12:16:a8:9c:94:88:74:23:82:cb:1d:93:5a:9f:
                    01:95:07:be:42:0f:75:6f:63:07:07:5d:57:1d:7b:
                    11:99:10:e5:29:15:8d:8a:88:8a:43:fe:73:59:e0:
                    9f:47:ef:1e:3f:b4:ab:16:ea:56:5e:cd:29:10:10:
                    fc:83:fe:ef:e8:08:09:54:e5:f9:f0:a8:02:93:09:
                    a8:4e:b6:7d:42:c5:26:8f:38:a9:da:ef:b5:19:88:
                    bb:20:a1:dd:96:d0:2c:73:1d:70:c7:ed:92:39:1e:
                    4e:2a:86:ba:49:ea:41:c8:db:01:7e:f8:b6:d7:94:
                    3e:6d:bf:33:16:ec:d9:cc:3d:97:24:b9:47:e7:ba:
                    88:85:b0:7a:9d:69:f1:87:31:2f:74:f6:6c:49:bb:
                    34:64:1d:88:fe:d5:03:14:09:ce:3f:e1:68:af:60:
                    68:0b:83:e4:e0:46:d2:1a:56:27:b6:69:d9:6b:48:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9E:04:DA:28:BC:9F:EB:33:CB:35:52:69:B4:9D:78:13:9B:CE:51
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:91:74:df:08:31:10:bc:60:14:2a:57:a6:51:44:53:ad:
         9b:b0:55:8f:55:b6:ec:d3:b1:be:1a:e7:ed:bd:00:49:12:39:
         67:1a:2a:5a:d1:21:56:28:98:0c:b2:84:e8:d2:99:0b:69:76:
         ff:d5:02:8a:43:c6:b1:f9:60:aa:7c:7e:85:fd:83:c8:76:fd:
         69:6f:54:e9:07:d5:78:ce:ea:75:6b:e8:55:bc:fc:43:4d:9a:
         c2:61:da:34:30:da:05:74:a7:bc:b2:cc:8c:0d:72:e5:48:87:
         ce:0e:79:e3:47:17:cc:c8:c6:77:46:d3:78:88:5f:18:64:6f:
         a1:26:ee:a3:df:79:23:f2:da:c2:45:57:e0:08:cd:d0:77:ca:
         15:15:2a:1e:ad:b3:52:29:6e:f0:09:9f:af:61:ff:5d:de:f5:
         a2:ef:ce:6e:3d:21:e1:be:50:15:83:19:8e:33:df:1f:b1:a8:
         fe:e3:9a:41:b9:89:af:bc:86:51:8e:89:4a:45:b4:2a:d1:a5:
         29:5e:23:34:f8:8d:4c:26:8e:8f:4b:52:88:98:5d:11:b6:23:
         39:95:6b:1d:3d:7d:4a:07:e3:c6:b1:6e:38:41:a7:d3:7e:7e:
         1a:53:b2:8f:1d:35:46:5e:3f:b6:0e:0e:c8:15:ec:75:d9:a7:
         3e:56:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:05:31 2025 by rpki-client